chaos-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various command-line utilities to inject system failures, including 'aws-cli' for terminating EC2 instances and rebooting RDS databases, 'kubectl' for managing Kubernetes resources, and 'toxiproxy-cli' for network manipulation.
- Evidence includes a bash script in
references/chaos-tools.mdthat terminates instances based on an Auto Scaling Group query. - Evidence in
references/infrastructure-chaos.mdshows usage ofstress-ngfor resource exhaustion andpumbafor container-level chaos. - [EXTERNAL_DOWNLOADS]: The skill integrates with external chaos engineering frameworks and monitoring tools.
references/chaos-tools.mdcontains a GitHub Action workflow that downloads the Litmus operator manifest directly fromlitmuschaos.github.iousingkubectl apply.- The skill also references official repositories for
toxiproxyandstress-ngfor local installation viabrewandapt-get. - [PRIVILEGE_ESCALATION]: Several scripts provided in the skill utilize high-privilege execution to modify system-level configurations.
references/infrastructure-chaos.mdincludes aDNSChaosclass that usessudoto append entries to/etc/hostsfor simulating DNS failures.- The resource exhaustion section in
references/infrastructure-chaos.mdusessudo apt-getto install thestress-ngutility. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface where untrusted configuration data or tool outputs could influence agent actions.
- Ingestion points: Reads experiment manifests (YAML) and monitoring metrics (JSON/Prometheus) to determine experiment status and recovery success.
- Boundary markers: None identified in the prompt templates or processing scripts.
- Capability inventory: Extensive capabilities including cloud infrastructure modification (
aws), cluster modification (kubectl), and local system modification (sudo). - Sanitization: No explicit sanitization of metric queries or resource labels is shown before they are interpolated into command strings.
Audit Metadata